Application decomposition, threat analysis, vulnerability detection, attack enumeration, risk/impact analysis is the threat modeling order using Process for Attack Simulation and Threat Analysis (PASTA). PASTA is a risk-centric threat modeling methodology that aims to identify and prioritize the most likely and impactful threats and vulnerabilities for a given system or application. PASTA consists of seven stages: definition, application decomposition, threat analysis, vulnerability analysis, attack enumeration, risk/impact analysis, and countermeasure selection. In each stage, PASTA uses various techniques and tools, such as data flow diagrams, attack trees, threat libraries, vulnerability scanners, risk matrices, and security controls, to perform a comprehensive and realistic threat assessment and mitigation plan.